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AMENDMENTS TO THE CLAIMS 

This Listing of Claims will replace all prior versions and listings of claims in this 
application. 

Listing of Claims: 

1. (Currently Amended) A central encryption management system, comprising: 

an encryption apparatus which can configured [to be connected between a plurality of data 
communications terminals, , the plurality of communications terminals for performing data 

the encryption apparatus including encryption/decryption means fbr fo performing at least 
one of an encrypting process andor a decrypting process on data to terminate encryption-based 
security between the-communications terminals having the-encrypting capability and tfee-non- 
encrypting capability; and 

a manager terminal for inputting tojngut infonnation.intg.Meh.of the..encrvgtign 
apparatus and the communications terminals having encrypting capability, the information 
including -whether or not data packets are to be disc arded between spe cific communication 
terminals after the da ta pac kets Jave bee n received a nd a time period for encryptionfe iNhe 
f^es^nee-er-abseiH^-ef-efxsry^^ 

the encryption level, the time period to perform encryption, the encryption policy, and the 
encryption-key--^ 

from the manager terminal over a network , so thatthereby. completing settings for the-encrypted 
data communications on each of the apparatus and the communications terminals having 
encrypting capabilit y are completed ; 

wher^in-4he- v arie u s- infonnation includ e s at l e ast on e of i ns tr u cti«g-wh&^ter--er--net--data 
faeteet^-are-te-be-diseard ed b e tw ee n sp e cifio t e rminais aft e r the da t a paeket»ha¥e-been--reeeivedv 
and the time period for the encryption; 

wheFein4he- p hiralit y of communications terminals, th e manag e r t e rmi n a l, aad-tfoe 
encryption apparatus are connected via a cable or wireless network; 
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wherein the encryption apparatus further includes a_bridge means-fer-al-lewk-g- to output 
data received on one of a plurality of ports of the encryption apparatus to be outputted as it is 
from another port of t he encryption apparatus, w ithout any routing process , after the encrypting 
Qi;.decryptinj.prcicess ; and 

wherein the data is received with one of a plurality of ports of the encryption apparatus 
and4l^-ene^#mg-eg ••deeryptiag-p roe e ss is p e rfo rme d on th e data . 

2. (Currently Amended) The central encryption management system according to claim 1, 

wherein the encryption^deeryption means performs the encrypting process and the decrypting 
f?fe-ecy< on data, so ihauv here in the encryption apparatus reeewe»a«d4 ! etran»m-it&is eonfi gured to 
receive and retr a mrnit data in the form of encrypted data from and to on e of the plurality of 
communications terminals having the encrypting capability, and the encryption apparatus is 
CQiifigured.tp„receiye.a^ and retransmits the data in the form of non- 

encrypted data from and to one of the plurality ofi he communications terminals having no 
encrypting capability. 

3. (Canceled) 

4. (Currently Amended) The central encryption management system according to claim 1, 
wherein; 

the encryption apparatus further includes a storagesetUng4nfor«atim»-stor-a-ge--gtean»#>¥ 
storing to store the information inputted from the manager terminal, in-whieh-the inputted 
information bejngis-used when controlling the encrypting process and the decrypting process; 
and 

the encryption apparatus controls the encrypting process and the decrypting process by 
comparing the information stored in the storag e s e tting inform a ti o n s to rage-means with header 
information of a data packet of the data received withthrough one of the plurality of ports. 

5. (Currently Amended) A central encryption management system, comprising: 
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an encryption apparatus having a plurality of ports wkk-h-ea nconfigured to be connected 
between a plurality of communications terminal s having either encryption capabilities or no 
encryption capabilities , in which the encryption apparatus to performs at least one of an 
encrypting process o r a decrypting process on data which has been received at one of a plurality 
of with one ports alter passingand then which has passed through a data link layer and a physical 



wherein the encryption apparatus outputs tfee-encrypted or decrypted data from another of 
the plurality of -ports through a data link layer and a physical layer associated with the other port 
without passing said data to a network layer in which routing between networks is controlled; 
and 

a manager terminal for inputting to input -information, including at leas t information for 
instructing whether or not data packets are to be discarded between specific communications 
terminals after the da ta packetshave.been.recdyed. and a time period fo r encryption, fe g-the 



the-eneryptien-kve^^ 

encryption key, into each of the encryption apparatus and the communications terminals, haying 
encryption ayjabilitigj^ thereby completing 

so tha t a setting of each of the apparatus and communications terminals having encry ption 
capabilities for communicating encrypted data i.s completed) Li j; 

wherein the various information includes at least one of instructing whether or not data 
pa^kets-ai-e-te-be-tfe^ 
and U-c lime period for the encryption: 

wherein the plurality of communications terminals, the encryption apparatus, and the 
«anag^-teffiri«al--are--eon%iifed- t o be co nn e ct e d via a cable or w ireless-network. 

6. (Currently Amended) The central encryption management system according to claim 5, 



the encryption apparatus further includes se tting information s tor ag e meam-fer-stof ing-a 
storage to store the information inputted from the manager terminal, in which the inputted 
information is used when controlling the encrypting process and the decrypting process; and 



layer; -and-. 




wherein: 
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the encryption apparatus controls the encrypting process and the decrypting process by 
comparing the information stored in the setting information storage means with header 
information of a data packet of the data received thro ugh w &fa one of the plurality of ports. 

7. (New) The central encryption management system according to claim 1, wherein the 
information comprises at least one of information associated with the presence or absence of 
encryption or decryption process, the availability of packet communications, an encryption level, 
a time period to perform encryption, a encryption policy, or an encryption key. 

8. (New) The central encryption management system according to claim 1, wherein the 
plurality of communications terminals are inside a secured network. 

9. (New) The central encryption management system according to claim 1, wherein the at 
least one of the plurality of communications terminals is outside a secured network. 

10. (New) The central encryption management system according to claim 1 , wherein the 
encryption apparatus comprises a data path for a connected terminal and performs the encryption 
process or the decryption process on data received or transmitted on each data path using a 
different encryption key associated with the connected terminal. 

1 1 . (New) The central encryption management system according to claim 1 , wherein the 
plurality of communications terminals having encrypting capability are connected to the 
encryption apparatus through an access point. 

12. (New) The central encryption management system according to claim 1, wherein the 
plurality of communications terminals are arranged in a plurality of local area networks. 

13. (New) The central encryption management system according to claim 12, comprising a 
plurality of manager terminals, each of the plurality of manager terminals to manage encryption 
and decryption settings in the communications terminals having encrypting capabilities in at least 
one of the plurality of local area networks. 

5 



Application No.: 10/710,987 



Docket No.: 27592-01 101-US1 



14. (New) A method of a central encryption management system, comprising: 

receiving data in an encryption apparatus configured to be connected between a plurality 
of communications terminals having either encryption capabilities or no encryption capabilities; 

performing, by the encryption apparatus, at least one of an encrypting process or a 
decrypting process on data to terminate encryption-based security between the communications 
terminals having the encrypting capability and the non-encrypting capability; and 

bridging data received on one of a plurality of ports of the encryption apparatus to 
another port of the encryption apparatus without any routing process after the encrypting or 
decrypting process, wherein 

information including whether or not data packets are to be discarded between specific 
terminals after the data packets have been received and a time period for the encryption are 
inputted into each of the encryption apparatus and the communications terminals having 
encrypting capability, thereby completing settings for encrypted data communications on each of 
the apparatus and the communications terminals having encryption capabilities. 

15. (New) The method according to claim 14, comprising: 

receiving and retransmitting, by the encryption apparatus, encrypted data from and to one 
of the plurality of communications terminals having the encrypting capability; and 

receiving and retransmitting, by the encryption apparatus, non-encrypted data from and to 
one of the plurality of communications terminals having no encrypting capability. 

16. (New) The method according to claim 14, comprising: 

storing, by the encryption apparatus, information inputted from a manager terminal, the 
inputted information being used when controlling the encrypting process and the decrypting 
process and 

controlling the encrypting process and the decrypting process by comparing the 
information stored in a storage with header information of a data packet of the data received 
through one of the plurality of ports. 
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17. (New) The method according to claim 14, comprising: 

performing an encrypting process or a decrypting process on data received at one of the 
plurality of ports after passing through a data link layer and a physical layer; and 

outputting encrypted or decrypted data from another of the plurality of ports through a 
data link layer and a physical layer associated with the other port without passing said data to a 
network layer in which routing between networks is controlled. 

18. (New) A central encryption management system, comprising: 

a plurality of encryption apparatuses configured to be connected between a plurality of 
communications terminals having no encrypting capability, each of the encryption apparatuses to 
perform at least one of an encrypting process or a decrypting process on data to terminate 
encryption-based security between the communications terminals; and 

a manager terminal for inputting information including whether or not data packets are to 
be discarded between specific terminals after the data packets have been received, and a time 
period for encryption into each of the encryption apparatuses, thereby completing settings for 
encrypted data communications on each of the encryption apparatuses; 

wherein each of the encryption apparatuses further include a bridge to output data 
received on one of a plurality of ports of the encryption apparatus to another port of the 
encryption apparatus, without any routing process, after the encrypting or decrypting process. 
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